Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ljIPWUgiqM-ipc2eHHp5rzsMLMc.roa
File: ljIPWUgiqM-ipc2eHHp5rzsMLMc.roa (raw, json)
Hash identifier: 7UeHSJjojIIlbfKfM0YD6DkrsWV7U0cuKmsiGwcIJZc=
Subject key identifier: 96:32:0F:59:48:22:A8:CF:A2:A5:CD:9E:1C:7A:79:AF:3B:0C:2C:C7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195EB7075AA6A8AB27DEB920B9DC03386D7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ljIPWUgiqM-ipc2eHHp5rzsMLMc.roa
Signing time: Mon 31 Mar 2025 09:02:50 +0000
ROA not before: Mon 31 Mar 2025 09:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:70:75:aa:6a:8a:b2:7d:eb:92:0b:9d:c0:33:86:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 31 09:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96320f594822a8cfa2a5cd9e1c7a79af3b0c2cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:6c:8c:3c:fd:cf:c1:ef:ea:57:b0:6b:de:
88:78:2e:d5:b2:65:ac:ab:1e:80:90:23:91:1c:27:
ba:2c:91:53:3c:69:91:a3:35:61:0b:9d:9b:96:1d:
d6:41:03:6f:54:0a:4a:dc:da:42:d8:25:cd:62:25:
4b:df:69:65:bc:0c:eb:de:51:3a:60:96:de:62:e4:
60:9d:5b:7c:c1:8b:5f:eb:68:40:dd:bd:f3:03:75:
e7:e4:5a:21:fd:d2:45:28:9c:64:bb:a5:bd:ac:57:
85:b0:10:4b:07:6e:f3:a7:db:ef:74:65:15:36:32:
50:37:62:04:62:9c:41:3d:59:f1:82:6a:5b:c5:70:
9d:ca:67:3b:1a:38:fe:6b:19:94:ce:89:e8:10:4f:
72:96:06:5e:8a:ec:09:3a:6f:60:0a:1a:b6:38:4c:
26:bf:3e:cd:c9:e5:db:63:fb:1b:da:7d:97:a5:27:
13:00:ee:69:eb:71:b7:e4:ec:e5:e8:4c:cd:e0:95:
de:2c:cf:92:d5:09:5b:da:35:ce:b8:57:60:d2:3b:
ba:97:e9:fe:24:2b:3e:83:25:3e:7e:09:07:51:d7:
15:16:ae:c2:90:f6:b3:f7:70:f7:0f:0b:7b:1c:c2:
a2:b5:5f:8a:f7:7b:23:31:b6:b6:03:dd:6c:b9:1e:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:0F:59:48:22:A8:CF:A2:A5:CD:9E:1C:7A:79:AF:3B:0C:2C:C7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ljIPWUgiqM-ipc2eHHp5rzsMLMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7b:a3:5a:88:fb:ac:a0:ab:83:b6:f9:b8:4f:bc:64:11:98:
5d:b4:03:2f:67:01:51:ec:f6:ba:af:75:8a:5e:df:18:33:91:
07:05:cd:e6:15:b8:32:45:de:51:e6:f8:c2:3c:ba:3e:ad:1e:
0a:ca:43:86:5c:17:6f:66:fa:7b:cb:5d:da:67:ed:19:72:19:
44:3a:a0:9d:50:c2:fb:7c:81:2a:61:67:a1:3a:98:ce:d0:ca:
8a:7f:46:1f:4d:96:a3:5d:01:bd:1c:82:01:fd:8e:9c:59:3d:
ed:13:db:f7:46:40:46:be:2c:e1:0f:41:2d:f6:6d:07:e8:be:
36:4e:05:61:b9:65:d5:68:bf:00:c6:bc:6d:c9:5c:30:00:1e:
24:8b:0e:78:bd:c1:ea:0a:45:0b:a9:b9:d1:32:c0:0b:94:39:
3c:70:73:7e:b9:67:2c:a1:de:a4:df:f5:91:80:d6:79:f0:9b:
75:16:e9:36:1d:b1:bf:3c:95:95:25:23:90:07:ec:82:32:27:
e1:f4:f8:cc:13:93:2c:3b:89:dd:6e:29:68:6b:9e:15:2e:a6:
b2:1b:81:9a:b8:27:06:c7:99:7f:35:7a:6e:55:cd:9d:67:9b:
51:76:bf:cb:cc:4f:8d:19:14:76:5f:3d:9e:72:3d:88:3c:6b:
4a:20:bd:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXrcHWqaoqyfeuSC53AM4bXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMzMxMDkwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjMyMGY1OTQ4MjJhOGNmYTJhNWNkOWUxYzdhNzlhZjNiMGMyY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrpsjDz9z8Hv6lewa96IeC7VsmWs
qx6AkCORHCe6LJFTPGmRozVhC52blh3WQQNvVApK3NpC2CXNYiVL32llvAzr3lE6
YJbeYuRgnVt8wYtf62hA3b3zA3Xn5Foh/dJFKJxku6W9rFeFsBBLB27zp9vvdGUV
NjJQN2IEYpxBPVnxgmpbxXCdymc7Gjj+axmUzonoEE9ylgZeiuwJOm9gChq2OEwm
vz7NyeXbY/sb2n2XpScTAO5p63G35Ozl6EzN4JXeLM+S1Qlb2jXOuFdg0ju6l+n+
JCs+gyU+fgkHUdcVFq7CkPaz93D3Dwt7HMKitV+K93sjMba2A91suR6nhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJYyD1lIIqjPoqXNnhx6ea87DCzHMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvbGpJUFdVZ2lxTS1pcGMyZUhIcDVyenNNTE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc76MA0G
CSqGSIb3DQEBCwUAA4IBAQBbe6NaiPusoKuDtvm4T7xkEZhdtAMvZwFR7Pa6r3WK
Xt8YM5EHBc3mFbgyRd5R5vjCPLo+rR4KykOGXBdvZvp7y13aZ+0ZchlEOqCdUML7
fIEqYWehOpjO0MqKf0YfTZajXQG9HIIB/Y6cWT3tE9v3RkBGvizhD0Et9m0H6L42
TgVhuWXVaL8AxrxtyVwwAB4kiw54vcHqCkULqbnRMsALlDk8cHN+uWcsod6k3/WR
gNZ58Jt1Fuk2HbG/PJWVJSOQB+yCMifh9PjME5MsO4ndbiloa54VLqayG4GauCcG
x5l/NXpuVc2dZ5tRdr/LzE+NGRR2Xz2ecj2IPGtKIL1y
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net